GDD2018大会PPT资料PWAR 03 - HTTPS (v11)最新完美版.pdfVIP

HTTPS: Securing the Foundations R O A D S H O W With great power comes great responsibility. Why HTTPS? Why HTTPS? Identity Who are you talking to? Why HTTPS? Identity Confidentiality Who are you Who can read your talking to? data? Why HTTPS? Identity Confidentiality Integrity Who are you Who can read your Who can modify talking to? data? your data? But what about… Performance Cost Maintenance But HTTPS is too hard… 1. My site doesnt need it! 2. Itll cause performance problems and Ill lose money 3. It costs too much to implement 4. Critical 3rd party dependancies may not support HTTPS yet But HTTPS is too hard… 1. My site doesnt need it! 2. Itll cause performance problems and Ill lose money 3. It costs too much to implement 4. Critical 3rd party dependancies may not support HTTPS yet APIs that require HTTPS • Service Workers • Encrypted Media • getUserMedia Extensions • Push Notifications • Geo Location • App Cache • HTTPS/2 For more information, see: /Home/chromium-security/prefer-secure-origins-for-powerful-new-features APIs that require HTTPS • Service Workers • Encrypted Media • getUserMedia Extensions • Push Notifications • Geo Location • App Cache • HTTPS/2